Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3137302e3233392e3232302e302f32322d3234203d3e203238323031.roa
File: 3137302e3233392e3232302e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier: bO3ZVUhh1nBFrOwekQVlD1Urd4wolFZtvtYeTea6aBM=
Subject key identifier: 91:B8:37:74:AD:3D:51:14:CE:0C:A1:5B:A6:1C:37:12:76:74:C6:26
Certificate issuer: /CN=27209C6DF15738819D919D908E37AC157E391505
Certificate serial: 4A47E583C29AB1B54035BCD767045F848B86EE51
Authority key identifier: 27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3137302e3233392e3232302e302f32322d3234203d3e203238323031.roa
Signing time: Wed 10 Apr 2024 12:37:24 +0000
ROA not before: Wed 10 Apr 2024 12:32:24 +0000
ROA not after: Wed 09 Apr 2025 12:37:24 +0000
asID: 28201
IP address blocks: 170.239.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:47:e5:83:c2:9a:b1:b5:40:35:bc:d7:67:04:5f:84:8b:86:ee:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27209C6DF15738819D919D908E37AC157E391505
Validity
Not Before: Apr 10 12:32:24 2024 GMT
Not After : Apr 9 12:37:24 2025 GMT
Subject: CN=91B83774AD3D5114CE0CA15BA61C37127674C626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:da:8f:4e:cf:e9:14:de:58:40:98:62:71:44:
89:de:6e:be:85:f4:13:26:f6:1a:8d:3a:a2:a4:08:
26:98:34:89:f1:8f:15:82:37:b5:9b:4b:0c:f3:d9:
1f:ea:3c:ae:ac:37:4e:ef:3c:70:0d:a9:59:4b:a3:
a1:54:4a:da:e2:19:27:c3:07:ed:df:59:c9:3d:db:
b6:84:f4:e2:65:f0:7e:99:50:cf:c9:a9:73:f2:49:
5a:fe:cd:fe:3d:27:87:98:9b:1e:08:0b:e7:c6:40:
e6:a5:47:ff:cb:6b:2e:b9:22:12:22:de:c3:64:bd:
8f:96:26:7c:51:d7:5e:b8:3a:a0:df:14:ed:f3:f1:
7d:bf:bb:72:36:49:0b:48:3e:b8:74:bc:7a:86:33:
f3:0d:e9:61:80:fd:53:66:58:09:a9:dc:0d:fe:a1:
0b:74:ac:f7:3c:38:77:d3:fa:dd:66:62:af:dc:7d:
50:44:65:3b:43:fd:97:ed:74:a9:1e:fe:1e:28:71:
00:32:4a:2c:74:81:d7:bc:95:98:4b:11:5f:36:d8:
c6:f6:e1:fe:5b:d4:49:51:ee:82:eb:22:d3:f0:d4:
1c:54:1e:c5:bd:ee:85:b4:c5:4f:e5:be:58:08:86:
96:f5:b9:4a:6d:0e:2e:2a:fd:87:58:06:ff:86:76:
f5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B8:37:74:AD:3D:51:14:CE:0C:A1:5B:A6:1C:37:12:76:74:C6:26
X509v3 Authority Key Identifier:
keyid:27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/27209C6DF15738819D919D908E37AC157E391505.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3137302e3233392e3232302e302f32322d3234203d3e203238323031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.239.220.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:9f:d2:83:07:21:b2:16:8f:33:21:98:79:f2:f1:1d:8f:ac:
41:10:ed:1a:21:41:4a:17:22:4a:9a:d1:3c:67:1f:f7:b7:31:
62:d0:b3:f1:d0:77:e1:14:fc:49:4a:ff:59:eb:4e:3a:d3:1a:
69:1b:19:81:65:74:bb:73:3e:c6:df:d0:61:f5:8d:51:17:f0:
53:48:ed:6f:0e:ad:0d:58:05:f3:90:c0:17:23:bf:96:b9:83:
12:3d:a3:a5:a5:d5:99:03:e3:34:6e:ec:54:29:40:58:0f:ca:
58:96:39:73:cd:51:b5:07:b7:8b:dc:01:da:66:25:7f:da:c4:
45:5c:ae:74:40:dd:39:ba:76:6c:21:b2:25:32:ce:57:34:76:
7c:3a:c4:f3:31:6d:17:0a:52:2a:9f:32:a7:bb:cf:8c:58:4a:
da:40:04:b8:29:49:b9:83:db:14:12:32:14:50:8b:9d:c3:c1:
45:ac:ec:36:06:bf:9b:4c:92:ed:27:e8:c3:cf:8e:a1:83:23:
c6:54:b8:e5:7f:3b:58:a2:77:cd:08:74:99:ec:a2:20:77:f0:
e1:1d:c5:2b:c2:95:90:fc:32:cb:12:dd:f6:2a:bd:e5:e7:ab:
fc:21:5b:7a:f4:f4:1f:93:9d:dc:36:12:8b:ec:fa:b4:c0:25:
4b:79:dd:09
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSkflg8KasbVANbzXZwRfhIuG7lEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjcyMDlDNkRGMTU3Mzg4MTlEOTE5RDkwOEUzN0FDMTU3
RTM5MTUwNTAeFw0yNDA0MTAxMjMyMjRaFw0yNTA0MDkxMjM3MjRaMDMxMTAvBgNV
BAMTKDkxQjgzNzc0QUQzRDUxMTRDRTBDQTE1QkE2MUMzNzEyNzY3NEM2MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL2o9Oz+kU3lhAmGJxRInebr6F
9BMm9hqNOqKkCCaYNInxjxWCN7WbSwzz2R/qPK6sN07vPHANqVlLo6FUStriGSfD
B+3fWck927aE9OJl8H6ZUM/JqXPySVr+zf49J4eYmx4IC+fGQOalR//Lay65IhIi
3sNkvY+WJnxR1164OqDfFO3z8X2/u3I2SQtIPrh0vHqGM/MN6WGA/VNmWAmp3A3+
oQt0rPc8OHfT+t1mYq/cfVBEZTtD/ZftdKke/h4ocQAySix0gde8lZhLEV822Mb2
4f5b1ElR7oLrItPw1BxUHsW97oW0xU/lvlgIhpb1uUptDi4q/YdYBv+GdvUHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUkbg3dK09URTODKFbphw3EnZ0xiYwHwYDVR0j
BBgwFoAUJyCcbfFXOIGdkZ2QjjesFX45FQUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXRnSEZyWXFvdGtucnpHTkhBMjJxUFhBcmJUMjJVc3BUR2NacmlETjZm
Z1UvMS8yNzIwOUM2REYxNTczODgxOUQ5MTlEOTA4RTM3QUMxNTdFMzkxNTA1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI3MjA5QzZERjE1NzM4ODE5
RDkxOUQ5MDhFMzdBQzE1N0UzOTE1MDUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl0Z0hGcllxb3RrbnJ6R05IQTIycVBYQXJiVDIyVXNwVEdjWnJpRE42ZmdVLzEv
MzEzNzMwMmUzMjMzMzkyZTMyMzIzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzgzMjMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq79wwDQYJKoZIhvcNAQELBQADggEBAAqf0oMH
IbIWjzMhmHny8R2PrEEQ7RohQUoXIkqa0TxnH/e3MWLQs/HQd+EU/ElK/1nrTjrT
GmkbGYFldLtzPsbf0GH1jVEX8FNI7W8OrQ1YBfOQwBcjv5a5gxI9o6Wl1ZkD4zRu
7FQpQFgPyliWOXPNUbUHt4vcAdpmJX/axEVcrnRA3Tm6dmwhsiUyzlc0dnw6xPMx
bRcKUiqfMqe7z4xYStpABLgpSbmD2xQSMhRQi53DwUWs7DYGv5tMku0n6MPPjqGD
I8ZUuOV/O1iid80IdJnsoiB38OEdxSvClZD8MssS3fYqveXnq/whW3r09B+Tndw2
Eovs+rTAJUt53Qk=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:12 2024 by rpki-client on console-ams.rpki-client.org